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Abstract of CM 1384639 (A) 



The distributed dynamic network security protecting system has centra! network administration station provided with 
summarizing decisicn module and policy releasing module. The network is divided into N subnetworks in tree structure, and 
each subnetwork administration station is provided with summarizing decision module and poiicy releasing module. Each 
node in me subnetwork has micro invasion detecting module and micro fire wall module installed, in the policy releasing 
module, mobile agency technology is adopted. The distributed micro invasion detecting module provides security protection 
in application layer while the distributed micro fire waii module provides security protection in kerne! level. The double 
security protection makes the system capable of preventing outer and inner attack, preventing cooperative invasion and 
providing dynamic Immunity. 
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